4 matches found
CVE-2024-13296
Deserialization of Untrusted Data vulnerability in Drupal Mailjet allows Object Injection.This issue affects Mailjet: from 0.0.0 before 4.0.1...
CVE-2024-13296 Mailjet - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-062
Deserialization of Untrusted Data vulnerability in Drupal Mailjet allows Object Injection.This issue affects Mailjet: from 0.0.0 before 4.0.1...
CVE-2024-13296
The Drupal Mailjet module (versions 0.0.0 through 4.0.0 ) is vulnerable to Remote Code Execution (RCE) due to a deserialization of untrusted data flaw. Specifically, the module fails to securely pass data to PHP's unserialize() function, which can lead to PHP Object Injection . While exploitation...
CVE-2024-13296 Mailjet - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-062
Deserialization of Untrusted Data vulnerability in Drupal Mailjet allows Object Injection.This issue affects Mailjet: from 0.0.0 before 4.0.1...